Ad-Hoc Application Penetration Testing and IT Health Checks (PSN) and Other Security Services

IT ServicesCPV 72600000

Value£250k

Deadline14 Sept 2026

Published17 Aug 2026

RegionNationwide

Timeline

Published 17 Aug 202626 days leftCloses 14 Sept 2026

Who to contact

Nita Patel

nita.patel@bradford.gov.uk

The procurement contact named on the official notice.

How to submit

Open the submissions portal

The submission route named on the official notice.

Contract value in context

£250ktotal contract value

median £120k

this tender£0£3.5m

This sits in the upper-middle of the IT Services band — a substantial contract for the sector. Based on 36,449 valued IT Services tenders in our corpus.

When this comes round again

City of Bradford Metropolitan District Council publishes IT Services work continuously — 187 notices, roughly one every 6 days. This is a stream to watch, not a cycle to wait for.

40% of City of Bradford Metropolitan District Council’s awards go to a supplier it has used before.

Which is the argument for getting on the list rather than winning this one. The incumbent is rarely the last winner — it is the roster. See the retention odds by category →

Match for your company

Sign up free to see how well this tender matches your company — the score, the signals that align, and where the gaps are.

The brief

The Council is seeking to appoint a suitably experienced and qualified Provider (the Provider) to deliver These vulnerability tests must make use of both automated and manual testing and using best practice strategies from NCSC (National Cyber Security Centre), Open Web Application Security Project (OWASP) etc, to undertake our PEN testing.

This tender is for the multiple block purchases of 10 consultancy days which can be used for a variety of security related testing and consultancy intended to identify weaknesses utilising publicly known vulnerabilities, common configuration faults or poor cyber awareness.

Including our IT Health Check for PSN compliance (both Internally and Externally).

The Council anticipates (but does not guarantee) that it will enter into a Framework Contract with the top 3 successful Providers.

The Framework will be established as an Open Framework under the Procurement Act 2023.

The initial framework term will be three (3) years, with the Authority intending to re-open the framework and award a successor framework before the expiry of the initial term.

The timing of any re-opening may be adjusted in accordance with the Procurement Act 2023 and the Authority's requirements.

The successor framework is intended to have a term of twelve (12) months The Council reserves the right to amend the scope of the support requirement and procure additional requirements as and when required throughout the term of the contract.

Requirements

What the notice asks for

The successor framework is intended to have

Sentences from the notice that state an obligation, surfaced automatically and shown in the order they appear. Not an exhaustive list — always confirm against the tender documents.

What it takes to bid this

12–20 daysof bid-team effort

£8.2k–£13.7kat typical UK bid-team rates

Typical UK bid effort for the £100k–£1m band — an estimate, not a quote.

Qualify & bid/no-bid ~10% · SQ / PQQ ~20% · Written response ~55% · Review & presentation ~15%

Typical for this category — confirm against the ITT pack

Hold at bidCyber Essentials Plus (often mandatory for gov IT)
Hold at bidISO 27001 (information security)
Plan for deliveryData protection / DPIA readiness
Show at bidComparable references / case studies
Hold at bidFinancial standing (accounts, often ~2× contract value turnover)
Hold at bidInsurance cover (PL / EL, often PI)
Show at bidSocial value commitments

Hold at bid = pass/fail conditions of participation. Show at bid = scored in the quality response. Plan for delivery = contract obligations from day one.

Short a bid team? Get matched and we’ll help you scope the bid →

Buyer intelligence

Make the case to bid

Reveal who to approach at City of Bradford Metropolitan District Council, and generate a go-to-market strategy from their news, accounts and people.

Free to start. Named contacts come from published notices; the strategy is generated from the buyer’s news, accounts and people.

Deep dive · beta

The full intelligence dossier

Our agent reads City of Bradford Metropolitan District Council’s accounts, hunts live signals, finds the people who decide — and hands you a bid strategy plus a go-to-market influence plan, including what your team should post this week. You approve every paid step.

Five included while we’re in beta, and the agent asks before it spends on any paid step.

Source & provenance